Multiple vulnerabilities in macOS Monterey



Published: 2022-07-21 | Updated: 2022-11-21
Risk Critical
Patch available YES
Number of vulnerabilities 61
CVE-ID CVE-2022-32857
CVE-2022-32823
CVE-2022-32814
CVE-2022-32786
CVE-2022-32800
CVE-2022-32838
CVE-2022-32843
CVE-2022-32796
CVE-2022-32842
CVE-2022-32798
CVE-2022-32799
CVE-2022-32818
CVE-2022-32807
CVE-2022-32829
CVE-2022-32801
CVE-2021-28544
CVE-2022-24070
CVE-2022-29046
CVE-2022-29048
CVE-2022-32834
CVE-2022-32816
CVE-2022-32792
CVE-2022-2294
CVE-2022-32837
CVE-2022-32847
CVE-2022-32848
CVE-2022-26981
CVE-2022-32817
CVE-2022-32832
CVE-2022-32789
CVE-2022-32826
CVE-2022-32810
CVE-2022-32840
CVE-2022-32845
CVE-2022-32797
CVE-2022-32851
CVE-2022-32852
CVE-2022-32853
CVE-2022-32831
CVE-2022-32820
CVE-2022-32825
CVE-2022-32805
CVE-2022-32815
CVE-2022-32828
CVE-2022-32839
CVE-2022-32819
CVE-2022-32793
CVE-2022-32821
CVE-2022-32849
CVE-2022-32787
CVE-2022-32841
CVE-2022-32785
CVE-2022-32811
CVE-2022-32812
CVE-2022-32813
CVE-2022-32788
CVE-2022-32802
CVE-2022-32861
CVE-2022-32863
CVE-2022-32880
CVE-2022-32910
CWE-ID CWE-319
CWE-401
CWE-843
CWE-20
CWE-200
CWE-787
CWE-119
CWE-125
CWE-264
CWE-416
CWE-79
CWE-352
CWE-254
CWE-451
CWE-122
CWE-476
Exploitation vector Network
Public exploit Vulnerability #23 is being exploited in the wild.
Public exploit code for vulnerability #29 is available.
Vulnerable software
Subscribe
macOS
Operating systems & Components / Operating system

Vendor Apple Inc.

Security Bulletin

This security bulletin contains information about 61 vulnerabilities.

1) Cleartext transmission of sensitive information

EUVDB-ID: #VU65616

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32857

CWE-ID: CWE-319 - Cleartext Transmission of Sensitive Information

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to Software Update uses insecure communication channel. A remote attacker on the local network can track user’s activity.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

2) Memory leak

EUVDB-ID: #VU65605

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32823

CWE-ID: CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Exploit availability: No

Description

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due memory leak in libxml2. A local application can gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

3) Type Confusion

EUVDB-ID: #VU65606

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32814

CWE-ID: CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a type confusion error in Multi-Touch. A local application can trigger a type confusion error and execute arbitrary code with kernel privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

4) Input validation error

EUVDB-ID: #VU65607

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32786

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation of user-supplied input when parsing environment variables in PackageKit. A local application can modify protected parts of the file system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

5) Input validation error

EUVDB-ID: #VU65609

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32800

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation of user-supplied input when parsing environment variables in PackageKit. A local application can modify protected parts of the file system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

6) Information disclosure

EUVDB-ID: #VU65608

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32838

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to a logic error in PluginKit. A local application can read arbitrary files on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

7) Out-of-bounds write

EUVDB-ID: #VU65610

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32843

CWE-ID: CWE-787 - Out-of-bounds Write

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing Postscript file in PS Normalizer. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

8) Buffer overflow

EUVDB-ID: #VU65611

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32796

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in SMB component. A local application can trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

9) Out-of-bounds read

EUVDB-ID: #VU65612

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32842

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in SMB component. A local application can trigger an out-of-bounds read error and execute arbitrary code with escalated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

10) Out-of-bounds write

EUVDB-ID: #VU65613

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32798

CWE-ID: CWE-787 - Out-of-bounds Write

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in SMB component. A local application can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

11) Out-of-bounds read

EUVDB-ID: #VU65614

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32799

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in SMB component. A local user can trigger an out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

12) Out-of-bounds read

EUVDB-ID: #VU65615

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32818

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in SMB component. A local user can trigger an out-of-bounds read error and read kernel memory.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

13) Input validation error

EUVDB-ID: #VU65617

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32807

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local application to overwrite files on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Spindump. A local application can overwrite arbitrary files.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

14) Buffer overflow

EUVDB-ID: #VU65603

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32829

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in OS kernel. A local application can trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

15) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65618

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32801

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to Spotlight does not properly impose security restrictions. A local application can execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

16) Information disclosure

EUVDB-ID: #VU62078

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2021-28544

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to exposure of the node "copyfrom" path copied from a protected location. A remote user can gain unauthorized access to sensitive information on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

17) Use-after-free

EUVDB-ID: #VU62079

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-24070

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within mod_dav_svn. A remote attacker can send specially crafted HTTP requests to the affected application and perform a denial of service (DoS) attack.


Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

18) Stored cross-site scripting

EUVDB-ID: #VU62304

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-29046

CWE-ID: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Exploit availability: No

Description

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to the affected plugin does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters. A remote user can inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

19) Cross-site request forgery

EUVDB-ID: #VU62306

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-29048

CWE-ID: CWE-352 - Cross-Site Request Forgery (CSRF)

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin. A remote user can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

20) Security features bypass

EUVDB-ID: #VU65619

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32834

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due to an error in TCC. A local application can bypass implemented sandbox restrictions and gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

21) Spoofing attack

EUVDB-ID: #VU65620

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32816

CWE-ID: CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to incorrect processing of user-supplied data in WebKit. A remote attacker can spoof page content.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

22) Out-of-bounds write

EUVDB-ID: #VU65621

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32792

CWE-ID: CWE-787 - Out-of-bounds Write

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input within the B3 JIT compiler in WebKit. A remote attacker can trick the victim into opening a specially crafted webpage, trigger an out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

23) Heap-based buffer overflow

EUVDB-ID: #VU64910

Risk: Critical

CVSSv3.1:

CVE-ID: CVE-2022-2294

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within WebRTC implementation. A remote attacker can trick the victim ti visit a specially crafted website, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Note, the vulnerability is being actively exploited in the wild.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

24) Out-of-bounds write

EUVDB-ID: #VU65622

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32837

CWE-ID: CWE-787 - Out-of-bounds Write

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in the Wi-Fi component. A local application can trigger memory corruption and perform a denial of service attack or execute arbitrary code on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

25) Buffer overflow

EUVDB-ID: #VU65623

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32847

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error in the Wi-Fi component. A remote attacker can send specially crafted traffic to the system, trigger memory corruption and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

26) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65624

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32848

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a logic issue in the Windows Server component. A local application can capture user’s screen.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

27) Buffer overflow

EUVDB-ID: #VU64229

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-26981

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary within the in compilePassOpcode() function in compileTranslationTable.c. A remote attacker can trick the victim to pass specially crafted data to the application, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

28) Out-of-bounds read

EUVDB-ID: #VU65604

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32817

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in OS kernel. A local application can trigger an out-of-bounds read error and read contents of kernel memory.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

29) Buffer overflow

EUVDB-ID: #VU65576

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32832

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: Yes

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the AppleAPFSUserClient::methodDeltaCreateFinalize() method in APFS. A local user can run a specially crafted program to trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

30) Security features bypass

EUVDB-ID: #VU65588

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32789

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to a logic error in the Automation component. A local application can bypass Privacy preferences.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

31) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65577

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32826

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improperly imposed security restrictions in AppleMobileFileIntegrity. A local user can execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

32) Buffer overflow

EUVDB-ID: #VU65578

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32810

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in Apple Neural Engine. A local user can run a specially crafted program to trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

33) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65579

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32840

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improperly imposed security restrictions in Apple Neural Engine. A local user can execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

34) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65580

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32845

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improperly imposed security restrictions in Apple Neural Engine. A local user can execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

35) Out-of-bounds read

EUVDB-ID: #VU65581

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32797

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the TASUnparser_PrintObject in AppleScript.framework. A remote attacker can create a specially crafted SCPT file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

36) Out-of-bounds read

EUVDB-ID: #VU65582

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32851

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

37) Out-of-bounds read

EUVDB-ID: #VU65583

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32852

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

38) Out-of-bounds read

EUVDB-ID: #VU65584

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32853

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

39) Out-of-bounds read

EUVDB-ID: #VU65585

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32831

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

40) Out-of-bounds write

EUVDB-ID: #VU65586

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32820

CWE-ID: CWE-787 - Out-of-bounds Write

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error when processing untrusted input within he Audio component. A local application can trigger an out-of-bounds write error and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

41) Buffer overflow

EUVDB-ID: #VU65587

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32825

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary error in Audio component. A local user can run a specially crafted program to trigger memory corruption and gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

42) Information disclosure

EUVDB-ID: #VU65589

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32805

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to insecure cache implementation in Calendar component. A local application can gain unauthorized access to sensitive information on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

43) Buffer overflow

EUVDB-ID: #VU65602

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32815

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in OS kernel. A local application can trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

44) Memory leak

EUVDB-ID: #VU65590

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32828

CWE-ID: CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Exploit availability: No

Description

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due memory leak in CoreMedia component. A local application can gain access to kernel information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

45) Buffer overflow

EUVDB-ID: #VU65591

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32839

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in CoreText. A remote attacker can create a specially crafted document, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

46) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65592

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32819

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to improperly imposed security restrictions in File System Events. A local application can gain root privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

47) Out-of-bounds write

EUVDB-ID: #VU65593

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32793

CWE-ID: CWE-787 - Out-of-bounds Write

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in GPU drivers. A local application can trigger an out-of-bounds write error and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

48) Buffer overflow

EUVDB-ID: #VU65594

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32821

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in GPU drivers. A local application can trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

49) Information disclosure

EUVDB-ID: #VU65595

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32849

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output in iCloud Photo Library. A local application can gain unauthorized access to sensitive information on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

50) Out-of-bounds write

EUVDB-ID: #VU65596

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32787

CWE-ID: CWE-787 - Out-of-bounds Write

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error in ICU components when processing untrusted input. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

51) Out-of-bounds read

EUVDB-ID: #VU65597

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32841

CWE-ID: CWE-125 - Out-of-bounds Read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in ImageIO. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

52) NULL pointer dereference

EUVDB-ID: #VU65598

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32785

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in ImageIO. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

53) Buffer overflow

EUVDB-ID: #VU65599

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32811

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in Intel Graphics driver. A local application can trigger memory corruption and execute arbitrary code with root privileges.


Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

54) Buffer overflow

EUVDB-ID: #VU65600

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32812

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in Intel Graphics driver. A local application can trigger memory corruption and execute arbitrary code with root privileges.


Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

55) Buffer overflow

EUVDB-ID: #VU65601

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32813

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in OS kernel. A local application can trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

56) Buffer overflow

EUVDB-ID: #VU65627

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32788

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in AppleAVD. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

57) Buffer overflow

EUVDB-ID: #VU65630

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32802

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in ImageIO. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

58) Information disclosure

EUVDB-ID: #VU68713

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32861

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a logic issue in WebKit. A remote attacker can track user's by their IP address.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

59) Buffer overflow

EUVDB-ID: #VU68714

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32863

CWE-ID: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing HTML content in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

60) Information disclosure

EUVDB-ID: #VU68712

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32880

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to unspecified error in AppleMobileFileIntegrity. A local application can gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

61) Input validation error

EUVDB-ID: #VU68711

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32910

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation when processing archives in Archive Utility. A remote attacker can trick the victim to open a specially crafted archive and bypass Gatekeeper protection features.

Successful exploitation of the vulnerability may lead to entire system compromise.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 12.0 21A344 - 12.4 21F79


CPE2.3 External links

http://support.apple.com/en-us/HT213345

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###